HTML injection vulnerability in Enpass Password Manager Desktop Client 6.9.2 for Windows and Linux allows attackers to run arbitrary HTML code via creation of crafted note.
References
Configurations
Configuration 1 (hide)
| AND |
|
History
17 Jun 2025, 20:56
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Linux
Microsoft Enpass Microsoft windows Linux linux Kernel Enpass password Manager |
|
| References | () https://packetstormsecurity.com/files/177075/Enpass-Desktop-Application-6.9.2-HTML-Injection.html - Broken Link | |
| CPE | cpe:2.3:a:enpass:password_manager:6.9.2:*:*:*:desktop:*:*:* cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
Information
Published : 2024-04-10 21:15
Updated : 2025-06-17 20:56
NVD link : CVE-2024-26362
Mitre link : CVE-2024-26362
CVE.ORG link : CVE-2024-26362
JSON object : View
Products Affected
microsoft
- windows
enpass
- password_manager
linux
- linux_kernel
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')